07.24.09
Security Links: Still Unsafe for Proprietary Platforms
• Digital Spy fights second malware attack
In response, Digital Spy issued a statement explaining that untoward content had been served up to US And Australian visitors but was now blocked. It said that the attack stemmed from an advertising exchange and was not confined to Digital Spy alone.
[...]
Digital Spy users were last exposed to malware via malicious banner ads that appeared in early June in an attack ultimately geared towards distributing rogue security software (AKA scareware).
• Erin Andrews peephole footage spreads Trojan
Surfers who visit the malicious sites are exposed to either the Jahlav-C Trojan horse on Macs, or the FakeAV-AY Trojan for Windows. In both cases, muck-fixated punters are tricked into downloading malware that poses as a video player supposedly needed to view footage of Andrews in her birthday suit. Code running on the hacker-controlled websites determines which strain of malware is offered up to visitors.
